Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/PiXXNun7qiX0BUoo-QxWLNeFfmo.roa
File: PiXXNun7qiX0BUoo-QxWLNeFfmo.roa (raw, json)
Hash identifier: EtkuzF3gxusNRxsGMSx11uOfDSKQgAOLS5y6f8Qag1Q=
Subject key identifier: 3E:25:D7:36:E9:FB:AA:25:F4:05:4A:28:F9:0C:56:2C:D7:85:7E:6A
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01942068522FBD5CBF86D5A9A37DC6D12534
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/PiXXNun7qiX0BUoo-QxWLNeFfmo.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206152
IP address blocks: 193.233.162.0/24 maxlen: 24
193.233.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:52:2f:bd:5c:bf:86:d5:a9:a3:7d:c6:d1:25:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e25d736e9fbaa25f4054a28f90c562cd7857e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fe:2d:0d:c0:a1:db:80:29:cb:0c:3a:02:7b:
d9:7a:71:b6:4d:5b:f0:dc:fb:97:56:0b:3b:c3:85:
7f:49:74:58:38:4c:17:e7:86:9e:83:49:4b:4d:8e:
48:ce:b6:21:2d:20:4e:74:7e:91:0f:ac:27:64:7d:
b4:e9:73:dd:f8:ca:de:0c:9d:bc:82:3f:56:2e:0d:
26:01:f1:fb:f4:c8:34:91:7f:03:b4:fe:c8:1b:f4:
70:c1:51:ee:27:8b:85:1d:36:f4:14:d4:81:a7:b0:
7f:56:b4:39:aa:68:24:76:87:81:8b:92:f3:b1:c8:
26:69:45:56:36:11:4e:24:2d:de:c9:28:f6:a8:a5:
31:1a:94:42:75:b1:db:aa:64:b6:d2:e1:f6:41:7a:
61:0b:45:dd:e5:af:38:a4:8e:4f:f1:99:47:88:8f:
5f:4d:ad:95:82:2d:12:c1:ea:3d:bb:5a:df:bc:39:
fd:88:42:1b:48:2c:a2:f8:23:71:20:89:40:03:bb:
4d:98:7b:02:e1:72:ca:eb:6e:c5:be:73:9a:a5:e1:
9e:f5:41:44:61:6e:13:cb:3c:72:7d:66:01:2e:13:
40:9c:7c:54:fd:b3:ba:81:7f:0b:68:52:0f:dd:4e:
f8:68:af:7d:9d:e9:ff:39:54:73:3d:e8:b5:9d:c5:
ef:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:25:D7:36:E9:FB:AA:25:F4:05:4A:28:F9:0C:56:2C:D7:85:7E:6A
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/PiXXNun7qiX0BUoo-QxWLNeFfmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.162.0/23
Signature Algorithm: sha256WithRSAEncryption
03:64:d1:e6:ac:60:20:9d:53:ff:4f:4f:72:56:4c:67:27:82:
7a:56:9c:37:15:d6:a4:1d:61:4b:75:a5:c7:61:66:92:1b:47:
af:1e:66:dc:c2:be:91:0e:ed:18:89:c6:1d:8b:a6:91:0f:13:
97:93:3d:2a:7f:c7:39:36:0f:e6:d8:e4:91:86:a9:08:73:23:
1a:51:12:91:7c:12:31:af:58:13:9e:26:82:e3:b0:1c:47:f2:
b1:f9:ca:d3:66:1d:84:be:20:ab:03:77:ee:a3:c4:c1:4b:f7:
ee:db:51:bc:19:b3:3b:aa:b8:70:62:0f:52:b6:55:1b:19:d1:
06:9a:64:9d:bd:a5:19:98:ef:bb:20:97:59:92:9e:b7:73:6c:
6f:2b:ec:e7:61:ce:53:e9:87:be:b7:be:2f:21:80:f9:ab:29:
4e:0a:4e:c6:e6:25:13:3d:dc:f4:2d:d8:98:00:1f:a4:43:36:
d8:89:82:cf:a8:ca:79:4a:ed:bd:f9:6b:c4:a1:b9:58:c9:62:
d8:1c:cf:7a:21:4d:0c:e9:22:37:62:4b:43:ae:82:35:f1:63:
a7:d2:29:7e:f4:0d:fd:52:91:4e:51:f9:63:eb:a7:8c:2e:dc:
18:d7:1e:26:99:fb:99:cb:34:29:a7:63:5d:9a:87:98:06:fc:
a2:c8:3b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:28 2025 by rpki-client